PT-2017-10940 · Ellislab+1 · Codeigniter+1

Publicado 2017-11-17 · Atualizado 2022-05-17 · CVE-2017-1000247

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions CodeIgniter version 3.1.3

Description The issue concerns HTTP Header Injection in the set status header() common function under Apache, resulting in HTTP Header Injection flaws.

Recommendations For CodeIgniter version 3.1.3, update to a newer version that contains a fix for this issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-1000247

GHSA-J9F9-8J39-4G97

Produtos afetados

Apache

Codeigniter

Referências · 5

• https://github.com/codeigniter4/framework · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000247 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-j9f9-8j39-4g97 · Aviso do Fabricante
• https://codeigniter.com/userguide3/changelog.html#version-3-1-4 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-1000247 · Aviso do Fabricante